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Detailed Action 
Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this 
Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in 
public use or on sale in this country, more than one year prior to the date of application for patent in 
the United States. 

2. Claims 1-57 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Tony Ballardie and Jon Crowcroft in their paper, "Multicast-Specific Security 
Threats and Counter-Measures", hereafter referred to as Ballardie. 

3. With regards to claim 1 , Ballardie teaches a multicast communication 
system comprising a plurality of subscriber locations, each subscriber location 
having an access device through which a number of subscriber devices access 
multicast information sent by a multicast distribution device (Ballardie teaches 
that memberships are available in multicast networks and hence, subscribers are 
able to use the network and subscriber devices must be present (page 3, first 
column, first paragraph). In addition, being a multicast, it is a network and 
networks have the claimed plurality of locations with access devices to enable 
access to the multicast network as claimed), wherein each access device acts as 
a sole multicast receiver for its respective subscriber location and distributes 
multicast information received from the multicast distribution device to the 
subscriber devices at its respective subscriber location (For a multicast network 
to function properly, each access device in the multicast must be able to serve as 
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a receiver to receive the data being sent through as claimed. In addition, 
Ballardie teaches that data sent in the multicast to the designated recipients 
arrives to those recipients (page 1 1 , section 9)). 

4. With regards to claim 2, Ballardie teaches a communication system 
wherein the multicast distribution device distributes multicast information for a 
number of multicast groups (Ballardie teaches such a distribution of information 
(page 15, second column, first paragraph)), and wherein each access device 
uses a predetermined multicast group management protocol to join the multicast 
groups on behalf its respective subscriber devices (Ballardie teaches how there 
are procedures for joining a group in a multicast (page 8, section 7.2). This is 
equivalent to the claimed joining protocol). 

5. With regards to claim 3, Ballardie teaches a communication system 
wherein the predetermined multicast group management protocol is an Internet 
Group Management Protocol (IGMP) (Ballardie's design uses IGMP, (page 15, 
second column, first paragraph)). 

6. With regards to claim 4, Ballardie teaches a multicast communication 
system comprising a multicast distribution device coupled to a plurality of 
subscriber locations, wherein each subscriber location is a separate subnetwork 
of the multicast distribution device (Ballardie discloses a design that has 
subnetworks and access controls at the subnetworks (page 10, second column, 
first paragraph). In addition, Ballardie discloses Authorization Servers (page 5, 
section 5.2). Such a server serves as a distribution device as claimed). 
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7. With regards to claim 5, Ballardie teaches a communication system 
wherein each subscriber location comprises one and only one access device 
through which subscriber devices at the subscriber location access multicast 
information distributed by the multicast distribution device (Ballardie's design 
features clients (page 8, section 7.2). In a network, a client is an access device, 
as claimed. No specifications were given with regards to a limiting number of 
access devices and hence having only one access device (client) per subscriber 
location is permissible in Ballardie's design). 

8. With regards to claim 6, Ballardie teaches a communication system 
wherein each access device is coupled to a separate interface of the multicast 
distribution device (Ballardie's design has an interface list (page 8, section 7.3). 
Ballardie further states that groups are added to the interface list. This is seen as 
having groups corresponding to an interface. With only one access device at a 
subscriber location, which is in a group, each access device is coupled to a 
separate interface as claimed). 

9. With regards to claim 7, Ballardie teaches a communication system 
wherein the multicast distribution device identifies each access device based 
upon the interface to which the access device is coupled (Ballardie's design has 
an interface list (page 8, section 7.3). Ballardie further states that groups are 
added to the interface list. This is seen as having groups corresponding to an 
interface. In addition, Ballardie's design has servers (distribution devices) and 
clients (access devices). The clients (access devices) are coupled to an 
interface and the server must know about each server (It is an Authorization 
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server and hence it must know about the location and status of the clients in the 
network). Hence, the servers (distribution devices) are able to identify the clients 
(access devices) as claimed). 

10. With regards to claim 8, Ballardie teaches a communication system 
wherein each access device joins multicast groups maintained by the multicast 
distribution device on behalf of its respective subscriber devices using a multicast 
group management protocol (Ballardie's design has clients (access devices) join 
groups through a process (protocol) (page 8, section 7.2)). 

1 1 . With regards to claim 9, Ballardie teaches a communication system 
wherein the multicast distribution device sends multicast information to the 
access devices based upon multicast group memberships of the access devices 
(Ballardie teaches that memberships are available in multicast networks and 
hence, subscribers are able to use the network (page 3, first column, first 
paragraph). In addition, Ballardie also discloses that servers (distribution 
devices) and clients (access devices) exist in his design, as stated above. 
Furthermore, Ballardie's design contains a multicast group access control (page 
2, second column, last paragraph). Hence, for the client to gain access as an 
access device, its membership to the multicast network must be verified. Thus, 
the server does distribute data based on the client's membership as claimed). 

12. With regards to claim 10, Ballardie teaches a communication system, 
wherein each access device distributes multicast information received from the 
multicast distribution device to its respective subscriber devices (Ballardie's 
design has the membership query sent to all the end systems that subscribe 
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(page 16, second column, first paragraph). The query is sent from an elected 
device that can be the client (access device)). 

1 3. With regards to claim 1 1 , Ballardie teaches a communication system 
wherein the multicast distribution device maintains accounting information for 
each subnetwork (Ballardie's design has the AS (the Authentication Servers) 
create and maintain multicast certificates. The AS also holds the group access 
control list (ACL) (page 7, section 7.1 , second paragraph). The AS is the 
distribution device and the ACL and certificates it maintains are accounting 
information). 

14. With regards to claim 12, Ballardie teaches a communication system 
wherein the accounting information comprises multicast group memberships for 
each subnetwork (Ballardie's design has the AS (the Authentication Servers) 
create and maintain multicast certificates. The AS also holds the group access 
control list (ACL) (page 7, section 7.1, second paragraph). The AS is the 
distribution device and the ACL is the accounting information comprising 
multicast group memberships for each subnetwork). 

15. With regards to claim 13, Ballardie teaches a communication system 
wherein the accounting information comprises duration for each multicast group 
membership for each subnetwork (Ballardie's design has the AS (the 
Authentication Servers) create and maintain multicast certificates. The AS also 
holds the group access control list (ACL) (page 7, section 7.1, second 
paragraph). The AS is the distribution device and the certificates are the 
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accounting information comprising duration for each multicast group membership 
for each subnetwork). 

16. With regards to claim 14, Ballardie teaches a communication system 
wherein the accounting information comprises a volume of multicast information 
for each multicast group membership for each subnetwork (Ballardie's design 
has the AS (the Authentication Servers) create and maintain multicast 
certificates. The AS also holds the group access control list (ACL) (page 7, 
section 7.1 , second paragraph). The AS is the distribution device and the ACL 
and certificates it maintains are accounting information comprising a volume of 
multicast information for each multicast group membership for each subnetwork). 

17. With regards to claim 15, Ballardie teaches a communication system 
having a multicast distribution device coupled to a plurality of subscriber 
locations, each subscriber location having an access device and at least one 
subscriber device, an access control method comprising: 

• Maintaining a number of multicast groups by the multicast distribution 
device (Ballardie's design has the AS (the Authentication Servers) 
create and maintain multicast certificates. The AS also holds the 
group access control list (ACL) (page 7, section 7.1 , second 
paragraph). The AS is the distribution device and the ACL and 
certificates it maintains are the items needed to maintain a number of 
multicast groups. In addition, a server is able to serve as a network 
maintaining device); and 
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• Joining one of said number of multicast groups by a first subscriber 
device, wherein joining one of said number of multicast groups by the 
first subscriber device comprises (In Ballardie's design, clients 
(subscriber devices) are able to join groups (page 8, section 7.2, first 
paragraph)): 

o Sending a first join request by the first subscriber device to an 
access device using a first multicast group management protocol 
(Ballardie teaches the steps required to join the multicast (page 8, 
section 7.2). The claimed step is taught in the disclosed steps); 

o Joining the multicast group by the access device on behalf of the 
first subscriber device (Ballardie teaches the steps required to join 
the multicast (page 8, section 7.2). The claimed step is taught in 
the disclosed steps); and 

o Associating the first subscriber device with the multicast group by 
the access device (Ballardie teaches the steps required to join the 
multicast (page 8, section 7.2). The claimed step is taught in the 
disclosed steps). 

18. With regards to claim 16, Ballardie teaches an access control method (a 
system can be a method) wherein joining the multicast group by the access 
device on behalf of the first subscriber device comprises: 

• Sending a second join request by the access device to the multicast 
distribution device using a second multicast group management 
protocol (Ballardie teaches the steps required to join the multicast 
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(page 8, section 7.2). The claimed step is taught in the disclosed 
steps. In particular, when the authorization stamp is encrypted and 
sent by the client (access device), that is a second join request using a 
second protocol); and 

• Authenticating the access device by the multicast distribution device 
(Ballardie teaches the steps required to join the multicast (page 8, 
section 7.2). The claimed step is taught in the disclosed steps. In 
particular, when the authorization stamp is sent by the client, the AS 
(distribution device) authenticates it). 

19. With regards to claim 17, Ballardie teaches an access control method (a 
system can be a method) wherein authenticating the access device by the 
multicast distribution device comprises: 

• Identifying the access device by the multicast distribution device 
(Ballardie teaches the steps required to join the multicast (page 8, 
section 7.2). The claimed step is taught in the disclosed steps. The 
authorization steps in Ballardie's design provide for the claimed 
identifying). 

20. With regards to claim 18, Ballardie teaches an access control method (a 
system can be a method) wherein the access device is coupled to an interface of 
the multicast distribution device (The AS (multicast distribution device) and the 
client (access device) are coupled together by a multicast network in Ballardie's 
design), and wherein identifying the access device by the multicast distribution 
device comprises: 
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• Identifying the access device based upon the interface over which the 
second join request is received by the multicast distribution device 
(Ballardie teaches the steps required to join the multicast (page 8, 
section 7.2). The claimed step is taught in the disclosed steps. The 
authorization stamp in Ballardie's design serves as the interface over 
which the client (access device) is identified by the AS (distribution 
device)). 

21 . With regards to claim 19, Ballardie teaches an access control method (a 
system can be a method) authenticating the access device by the multicast 
distribution device comprises: 

• Authenticating the access device using a predetermined authentication 
scheme (The authentication is performed in Ballardie's design using a 
predetermined authentication scheme, which uses an authentication 
stamp and time stamp (page 8, section 7.2). If an authentication is to 
occur, it is inherent that the authentication method is predetermined). 

22. With regards to claim 20, Ballardie teaches an access control method (a 
system can be a method) wherein the predetermined authentication scheme 
comprises IPsec AH (Ballardie's teaches IP (Internet protocols) and multicasts 
(page 3, section 2, 2 nd paragraph). In addition, Ballardie's design focuses on 
security for multicasts (page 1 , first column, first paragraph). Furthermore, 
Ballardie teaches the use of authentication headers (AH) in IP (page 6, first 
column, second paragraph)). 
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23. With regards to claim 21 , Ballardie teaches an access control method (a 
system can be a method) further comprising: 

• Determining by the multicast distribution device that the access device 
is authentic (The AS (authorization server) (multicast distribution 
device) performs security verifications (page 5, section 5.3, third 
paragraph), this includes authentications); and 

• Establishing a multicast group membership for the access device by 
the multicast distribution device (Ballardie's design has the AS 
(distribution device) create and maintain the multicast certificates 
(which are needed to establish connections) (page 7, section 7.1, 
second paragraph)). 

24. With regards to claim 22, Ballardie teaches an access control method (a 
system can be a method) further comprising: 

• Determining by the multicast distribution device that the access device 
is not authentic (Ballardie teaches the steps required to join the 
multicast (page 8, section 7.2). The claimed step is taught in the 
disclosed steps. In particular, when the authorization stamp is sent by 
the client, the AS (distribution device) authenticates it); and 

• Denying a multicast group membership for the access device by the 
multicast distribution device (Ballardie teaches the steps required to 
join the multicast (page 8, section 7.2). The claimed step is taught in 
the disclosed steps. In particular, when the client sends the 
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authorization stamp, the AS (distribution device) authenticates it. If the 
AS cannot authenticate, a rejection message is sent). 

25. With regards to claim 23, Ballardie teaches an access control method (a 
system can be a method) wherein associating the first subscriber device with the 
multicast group by the access device comprises: 

• Maintaining by the access device a list of subscriber devices 
associated with the multicast group (In Ballardie's design, a client 
chooses to join a restricted group (page 8, section 7.2, first paragraph). 
It is therefore inherent that the client (access device) know what 
subscriber devices are available (by maintaining a list)); and 

• Adding the first subscriber device to the list of subscriber devices 
associated with the multicast group (In Ballardie's design, a client 
chooses to join a restricted group (page 8, section 7.2, first paragraph). 
It is therefore inherent that the client (access device) knows what 
subscriber devices are available (by keeping a list) and can add 
subscriber devices to its list). 

26. With regards to claim 24, Ballardie teaches an access control method (a 
system can be a method) further comprising: 

• Leaving the multicast group by the first subscriber device (If the 
subscriber device can join the multicast as stated above, it is inherent 
that the device can leave the multicast group); 
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• Leaving the multicast group by the access device on behalf of the first 
subscriber device (If the subscriber device leaves the multicast, then 
inherently the access device will leave the group as well); and 

• Disassociating the first subscriber device from the multicast group by 
the access device (When both the access device and the subscriber 
device leave the multicast, they lose the need to associate with one 
another. It is inherent that the subscriber device would disassociate 
with the access device). 

27. With regards to claim 25, Ballardie teaches an access control method (a 
system can be a method) further comprising: 

• Joining the multicast group by a second subscriber device, wherein 
joining the multicast group by the second subscriber device comprises: 
sending a third join request by the second subscriber device to the 
access device using a third multicast group management protocol 
(Ballardie teaches the steps required to join the multicast (page 8, 
section 7.2). A second subscriber device is able to join the multicast. 
When it does, it will have to pass its own authentication process, which 
uses data (such as keys and stamps) that are different than the first 
subscriber to join. Thus, the second subscriber device sends a third 
join request as claimed); and 

• Associating the second subscriber device with the multicast group by 
the access device (Ballardie teaches the steps required to join the 
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multicast (page 8, section 7.2). The claimed step is taught in the 
disclosed steps). 

28. With regards to claim 26, Ballardie teaches an access control method (a 
system can be a method) further comprising: 

• Leaving the multicast group by one of the first subscriber device and 
the second subscriber device (If the subscriber device leaves the 
multicast, then inherently the access device will leave the group as 
well); 

• Remaining joined to the multicast group by the access device on 
behalf of the remaining subscriber device (In a network, devices can 
enter and leave one at a time without the activities of the other devices 
being affected. So, if one subscriber device leaves the multicast 
network, inherently the others can remain); and 

• Disassociating said one of the first subscriber device and the second 
subscriber device from the multicast group by the access device 
(When both the access device and the subscriber device leave the 
multicast, they lose the need to associate with one another. It is 
inherent that the subscriber device would disassociate with the access 
device). 

29. With regards to claim 27, Ballardie teaches an access control method (a 
system can be a method) further comprising: 

• Maintaining accounting information by the multicast distribution device 
for each multicast group for each subscriber location (Ballardie's 
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design has the AS (the Authentication Servers) create and maintain 
multicast certificates. The AS also holds the group access control list 
(ACL) (page 7, section 7.1, second paragraph). The AS is the 
distribution device and the ACL and certificates it maintains are 
accounting information). 
30. With regards to claims 28 and 42, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) for operating as a sole multicast 
receiver on behalf of a number of subscriber devices at a subscriber location in a 
multicast communication network, the apparatus comprising: 

• A network interface couplable to a multicast distribution device (In 
Ballardie's design, there is an interface for a group to the AS 
(distribution device) (page 5, section 5.3, second paragraph); 

• A subscriber interface couplable to the number of subscriber devices at 
the subscriber location (Ballardie discloses a design with a user 
interface (page 8, section 7.2, first paragraph). Such an interface is a 
subscriber interface); and 

• Switching logic interposed between the network interface and the 
subscriber interface, wherein the switching logic is operably coupled to 
join multicast groups maintained by the multicast distribution device on 
behalf of the number of subscriber devices and forward multicast 
information to the subscriber devices (Ballardie's design uses routers 
(page 5, section 5.3, fourth paragraph). Routers use switching logic 
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between the network interface and the subscriber interface and are 
able to join groups). 

31 . With regards to claims 29 and 43, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the switching logic 
comprises: 

• First multicast group management logic operably coupled to control 
first multicast group memberships between the apparatus and the 
subscriber devices (For two devices to function together, it is inherent 
that they would be coupled together by some means (that includes by 
management logic)); 

• Second multicast group management logic operably coupled to control 
second multicast group memberships between the apparatus and the 
multicast distribution device (For two devices to function together, it is 
inherent that they would be coupled together by some means (that 
includes by management logic)); and 

• Membership logic operably coupled to maintain said first and second 
multicast group memberships (Ballardie's design has access controls 
to maintain memberships as deemed appropriate (page 7, section 7.1, 
first paragraph). This is equivalent to membership logic and inherently 
maintgains memberships). 

32. With regards to claims 30 and 44, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the first multicast group 
management logic comprises Internet Group Management Protocol (IGMP) logic 
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for exchanging multicast group membership information with the subscriber 
devices (Ballardie's design uses IGMP, (page 15, second column, first 
paragraph)). 

33. With regards to claims 31 and 45, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the second multicast group 
management logic comprises Internet Group Management Protocol (IGMP) logic 
for exchanging multicast group membership information with the multicast 
distribution device (Ballardie's design uses IGMP, (page 15, second column, first 
paragraph)). 

34. With regards to claims 32 and 46, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the membership logic is 
operably coupled to associate the first multicast group memberships with the 
second multicast group memberships (In Ballardie's design there are routers that 
deal with memberships (page 8, section 7.2, first paragraph)). 

35. With regards to claims 33 and 47, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the membership logic is 
operably coupled to maintain a list of subscriber devices for each of said second 
multicast group memberships (Ballardie's design has both ACL (page 7, section 
7.1, second paragraph) and interface lists (page 8, section 7.3, first paragraph). 
Both lists are able to hold subscriber information and can be coupled to 
membership logic). 

36. With regards to claims 34 and 48, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the first multicast group 
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management logic is operably coupled to receive a join request from a subscriber 
device for joining a multicast group (Ballardie teaches how there are procedures 
for joining a group in a multicast (page 8, section 7.2). This is equivalent to the 
claimed joining protocol). 

37. With regards to claims 35 and 49, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the second multicast group 
management logic is operably coupled to join the multicast group on behalf of the 
first subscriber device (Ballardie teaches how there are procedures for joining a 
group in a multicast (page 8, section 7.2). This is equivalent to the claimed 
joining protocol). 

38. With regards to claims 36 and 50, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the membership logic is 
operably coupled to associate the first subscriber device with the multicast group 
(As stated above, Ballardie teaches that memberships are available in multicast 
networks and hence, subscribers are able to use the network and subscriber 
devices must be present (page 3, first column, first paragraph). 

39. With regards to claims 37 and 51 , Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the first multicast group 
management logic is operably coupled to determine that a subscriber device has 
left a multicast group (As stated above, If the subscriber device can join the 
multicast as stated above, it is inherent that the device can leave the multicast 
group). 
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40. With regards to claims 38 and 52, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the membership logic is 
operably coupled to disassociate the subscriber device from the multicast group 
(When the subscriber device leaves the multicast, it loses the need to associate 
with the multicast. It is inherent that the subscriber device would disassociate 
with the multicast). 

41 . With regards to claims 39 and 53, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the second multicast group 
management logic is operably coupled to determine whether there are any 
remaining subscriber devices associated with the multicast group based upon the 
membership information maintained by the membership logic (Ballardie's design 
uses ACL (page 7, section 7.1 , second paragraph) and interface lists (page 8 ( 
section 7.3, first paragraph). With such lists, the network has the means by 
which to detect if any devices are attached to the multicast (including subscriber 
devices)). 

42. With regards to claims 40 and 54, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the second multicast group 
management logic is operably coupled to remain a member of the multicast 
group upon determining that there is at least one remaining subscriber device 
associated with the multicast group (Ballardie's design uses ACL (page 7, 
section 7.1, second paragraph) and interface lists (page 8, section 7.3, first 
paragraph). With such lists, the network has the means by which to detect if any 
devices are attached to the multicast (including subscriber devices). In addition, 
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in a network if one device leaves, other devices are permitted to remain 
connected). 

43. With regards to claims 41 and 55, Ballardie teaches an apparatus (a 
system can be an apparatus and a program) wherein the second multicast group 
management logic is operably coupled to leave the multicast group upon 
determining that there are no remaining subscriber devices associated with the 
multicast group (Ballardie's design uses ACL (page 7, section 7.1 , second 
paragraph) and interface lists (page 8, section 7.3, first paragraph). With such 
lists, the network has the means by which to detect if any devices are attached to 
the multicast (including subscriber devices). In addition, in a network a device 
can leave at various times). 

44. With regards to claim 56, Ballardie teaches a program embodied in a 
computer readable medium (Ballardie's design features servers (page 5, section 
5.3, second paragraph) and clients (page 8, section 7.2, first paragraph). It is 
inherent that both servers and clients use programs and must have computer 
readable mediums). 

45. With regards to claim 57, Ballardie teaches a program embodied in a data 
signal (Ballardie's design features servers (page 5, section 5.3, second 
paragraph) and clients (page 8, section 7.2, first paragraph). Clients and servers 
both use programs and it is inherent that the program would be embodied in a 
data signal. The data signal can be stored in a medium). 



Conclusion 
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46. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

US Pat No: US005748736A (Mittra) 

47. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Azizul Choudhury whose telephone number 
is 703-305-7209. The examiner can normally be reached on M-F. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, David Wiley can be reached on 703-308-5221 . The fax 
phone number for the organization where this application or proceeding is 
assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application 
or proceeding should be directed to the receptionist whose telephone number is 
703-305-3800. 
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